VYPR
Critical severity9.8NVD Advisory· Published Sep 12, 2025· Updated Jun 17, 2026

CVE-2024-45434

CVE-2024-45434

Description

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-After-Free. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of validating the existence of an object before performing operations on the object (aka use after free). An attacker can leverage this to achieve remote code execution in the context of a user account under which the Bluetooth process runs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • OpenSynergy/Bluesdkcpe-rescue3 versions
    (expand)+ 2 more
    • (no CPE)
    • (no CPE)range: <=6.x
    • (no CPE)range: <=6.x

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.